@gate-forge/core 0.1.0

package/dist/schemas/classification-signal.js

@@ -0,0 +1,126 @@
+/**
+ * Classification-signal schemas (ADR 0003 D1): the framework-neutral
+ * evidence contract detectors emit so core can classify resources
+ * automatically. A signal is a FACT — source-located, detector-versioned,
+ * basis-typed — never a classification and never authoritative. Core's
+ * deterministic rule lattice (ADR 0003 D2) turns signals into decisions.
+ *
+ * Anti-pattern guards encoded here:
+ * - no confidence score field (a signal has a `basis`, not a probability);
+ * - every signal must carry a `Location` and a detector identity;
+ * - `code-negative-closed-world` names the only basis allowed to
+ *   suppress, and the classifier additionally demands a complete-scan
+ *   attestation before honoring it.
+ */
+import { z } from 'zod';
+import { sha256Canonical } from '../canonical-json.js';
+import { LocationSchema, PlaneSchema, SchemaVersionField } from './common.js';
+/** What a signal addresses: bare name, plane-qualified id, or symbol. */
+export const SignalTargetSchema = z
+    .object({
+    /** Bare resource name, e.g. `accounts`. */
+    resourceName: z.string().min(1).optional(),
+    /** Plane-qualified resource id, e.g. `tenant.accounts`. */
+    resourceId: z.string().min(1).optional(),
+    /** Class/function symbol, e.g. `app.models.Account` (matches a resource's `classQname` attribute). */
+    symbol: z.string().min(1).optional(),
+})
+    .strict();
+/** Every classification dimension a signal can speak about. */
+export const SIGNAL_DIMENSIONS = [
+    'exposure',
+    'plane',
+    'identity',
+    'lifecycle.create',
+    'lifecycle.read',
+    'lifecycle.update',
+    'lifecycle.delete',
+    'delete-semantics',
+    'archive-state',
+    'adapter-binding',
+    'internality',
+];
+export const SignalDimensionSchema = z.enum(SIGNAL_DIMENSIONS);
+/**
+ * The evidence basis of a signal (ADR 0003 D1). Only
+ * `code-negative-closed-world` may ever suppress obligations, and only
+ * when the classifier's complete-scan attestation holds.
+ */
+export const SignalBasisSchema = z.enum([
+    'code-positive',
+    'code-negative-closed-world',
+    'declaration',
+    'organization-policy',
+]);
+/**
+ * Dimension-typed assertion payload: `exposure`/`internality` carry a
+ * boolean or category string, `plane` a plane name, `identity` the
+ * ORDERED primary-key columns, `delete-semantics` `hard|archive`,
+ * `archive-state` the owner-owned archived field values, lifecycle
+ * dimensions a boolean.
+ */
+export const SignalAssertionSchema = z.union([
+    z.string().min(1),
+    z.boolean(),
+    z.array(z.string().min(1)).min(1),
+    z.record(z.string(), z.union([z.string(), z.number(), z.boolean()])),
+]);
+/**
+ * One classification signal (ADR 0003 D1). Strict: unknown fields are
+ * detector bugs and must fail validation, not ride along.
+ */
+export const ClassificationSignalSchema = z
+    .object({
+    schemaVersion: SchemaVersionField,
+    /** What resource(s) this signal speaks about. */
+    target: SignalTargetSchema,
+    /** The classification dimension being evidenced. */
+    dimension: SignalDimensionSchema,
+    /** Dimension-typed assertion payload. */
+    assertion: SignalAssertionSchema,
+    /** Evidence basis — never a confidence score. */
+    basis: SignalBasisSchema,
+    /**
+     * Issuing source. For SUPPRESSIVE decisions (internality, closed-world
+     * lifecycle disable) only configured declaration sources or explicit
+     * `gateforge.declaration:<key>` references to configured keys are
+     * authoritative — a `gateforge.policy:` prefix alone proves nothing;
+     * policy-issued signals enter through engine-controlled minting.
+     */
+    source: z.string().min(1),
+    /** Where the evidence lives in source. */
+    location: LocationSchema,
+    /**
+     * Detector that emitted the signal. The engine issuer
+     * (`gateforge.core@1`) is reserved: plugin-emitted signals whose
+     * detector identity is not the pinned plugin are rejected at the
+     * boundary, and `gateforge.core` cannot be configured as a plugin id.
+     */
+    detector: z.strictObject({ id: z.string().min(1), version: z.string().min(1) }),
+})
+    .strict();
+/**
+ * Canonical signal identity (ADR 0003 D1): sha256 over the GF-canonical
+ * JSON of the full signal document. Any change of location, assertion,
+ * basis, or detector version changes the id — which is what makes
+ * `decisionFingerprint`s stale-aware (plan goal 8).
+ *
+ * Args:
+ *   signal: a validated classification signal.
+ *
+ * Returns:
+ *   string: 64-char lowercase sha256 hex.
+ */
+export function signalId(signal) {
+    return sha256Canonical(signal);
+}
+/**
+ * The plane-assertion payload narrowed, for signals that assert a plane.
+ */
+export function planeAssertion(signal) {
+    if (signal.dimension !== 'plane')
+        return null;
+    const parsed = PlaneSchema.safeParse(signal.assertion);
+    return parsed.success ? parsed.data : null;
+}
+//# sourceMappingURL=classification-signal.js.map

package/dist/schemas/classification-signal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"classification-signal.js","sourceRoot":"","sources":["../../src/schemas/classification-signal.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,eAAe,EAAkB,MAAM,sBAAsB,CAAC;AACvE,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAE9E,yEAAyE;AACzE,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC;KAChC,MAAM,CAAC;IACN,2CAA2C;IAC3C,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC1C,2DAA2D;IAC3D,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACxC,sGAAsG;IACtG,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACrC,CAAC;KACD,MAAM,EAAE,CAAC;AAKZ,+DAA+D;AAC/D,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,UAAU;IACV,OAAO;IACP,UAAU;IACV,kBAAkB;IAClB,gBAAgB;IAChB,kBAAkB;IAClB,kBAAkB;IAClB,kBAAkB;IAClB,eAAe;IACf,iBAAiB;IACjB,aAAa;CACL,CAAC;AAKX,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;AAE/D;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,IAAI,CAAC;IACtC,eAAe;IACf,4BAA4B;IAC5B,aAAa;IACb,qBAAqB;CACtB,CAAC,CAAC;AAKH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC;IAC3C,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACjB,CAAC,CAAC,OAAO,EAAE;IACX,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACjC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;CACrE,CAAC,CAAC;AAKH;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC;KACxC,MAAM,CAAC;IACN,aAAa,EAAE,kBAAkB;IACjC,iDAAiD;IACjD,MAAM,EAAE,kBAAkB;IAC1B,oDAAoD;IACpD,SAAS,EAAE,qBAAqB;IAChC,yCAAyC;IACzC,SAAS,EAAE,qBAAqB;IAChC,iDAAiD;IACjD,KAAK,EAAE,iBAAiB;IACxB;;;;;;OAMG;IACH,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,0CAA0C;IAC1C,QAAQ,EAAE,cAAc;IACxB;;;;;OAKG;IACH,QAAQ,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;CAChF,CAAC;KACD,MAAM,EAAE,CAAC;AAKZ;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,QAAQ,CAAC,MAA4B;IACnD,OAAO,eAAe,CAAC,MAA8B,CAAC,CAAC;AACzD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,MAA4B;IACzD,IAAI,MAAM,CAAC,SAAS,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IAC9C,MAAM,MAAM,GAAG,WAAW,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACvD,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7C,CAAC"}

package/dist/schemas/classification.d.ts

@@ -0,0 +1,120 @@
+/**
+ * Classification schemas (plan §4.3): business meaning attached to
+ * discovered resources that cannot be safely inferred — exposure, plane,
+ * lifecycle, identity columns, and the trusted evidence adapter.
+ *
+ * ADR 0001 encoded here:
+ * - composite identity = column-keyed `entityId` + mandatory ordered
+ *   `primaryKey` attribute;
+ * - internal resources default to NO CRUD obligations and their claims
+ *   are invalid (enforced downstream by the verdict engine, not here);
+ * - a user-facing resource cannot be proven without a trusted evidence
+ *   adapter, so `evidenceAdapter` is mandatory for user-facing entries —
+ *   on the BUSINESS-resource lane. `http.endpoint` resources are witnessed
+ *   through the claims/witness-proxy lane (`http:frontend-request-observed`
+ *   etc.), not through entity persistence adapters (whose contract — read
+ *   by id, normalize body, deletion kind — is about business entities), so
+ *   a user-facing classification may instead declare
+ *   `evidenceLane: 'claims'` and omit the adapter.
+ */
+import { z } from 'zod';
+/**
+ * Lifecycle surface of a resource. `create`/`read`/`update` are plain
+ * switches; `delete` additionally declares its semantics because archive
+ * and hard delete have different evidence contracts (plan §5.3).
+ *
+ * `archiveFields` is the OWNER-DECLARED archived state (audit round 5):
+ * the expected post-archive field values come from the classification —
+ * never from the tested suite — so a suite cannot bless an unarchived
+ * entity by declaring its current state as the expected result.
+ */
+export declare const LifecycleSchema: z.ZodObject<{
+    create: z.ZodBoolean;
+    read: z.ZodBoolean;
+    update: z.ZodBoolean;
+    delete: z.ZodBoolean;
+    deleteSemantics: z.ZodOptional<z.ZodEnum<{
+        hard: "hard";
+        archive: "archive";
+    }>>;
+    archiveFields: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>>;
+    updateableFields: z.ZodOptional<z.ZodArray<z.ZodString>>;
+}, z.core.$strict>;
+/** Inferred lifecycle shape. */
+export type Lifecycle = z.infer<typeof LifecycleSchema>;
+/**
+ * Classification entry for a single resource id.
+ */
+export declare const ClassificationSchema: z.ZodObject<{
+    exposure: z.ZodEnum<{
+        "user-facing": "user-facing";
+        internal: "internal";
+    }>;
+    plane: z.ZodEnum<{
+        tenant: "tenant";
+        master: "master";
+        global: "global";
+    }>;
+    lifecycle: z.ZodObject<{
+        create: z.ZodBoolean;
+        read: z.ZodBoolean;
+        update: z.ZodBoolean;
+        delete: z.ZodBoolean;
+        deleteSemantics: z.ZodOptional<z.ZodEnum<{
+            hard: "hard";
+            archive: "archive";
+        }>>;
+        archiveFields: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>>;
+        updateableFields: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    }, z.core.$strict>;
+    primaryKey: z.ZodArray<z.ZodString>;
+    evidenceAdapter: z.ZodOptional<z.ZodString>;
+    evidenceLane: z.ZodOptional<z.ZodEnum<{
+        adapter: "adapter";
+        claims: "claims";
+    }>>;
+    notes: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+/** Inferred per-resource classification shape. */
+export type Classification = z.infer<typeof ClassificationSchema>;
+/**
+ * The classifications document: `.gateforge` classification YAML mapping
+ * resource ids to their classification. Resources discovered but absent
+ * here are `unclassified` and fail closed downstream.
+ */
+export declare const ClassificationFileSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    resources: z.ZodRecord<z.ZodString, z.ZodObject<{
+        exposure: z.ZodEnum<{
+            "user-facing": "user-facing";
+            internal: "internal";
+        }>;
+        plane: z.ZodEnum<{
+            tenant: "tenant";
+            master: "master";
+            global: "global";
+        }>;
+        lifecycle: z.ZodObject<{
+            create: z.ZodBoolean;
+            read: z.ZodBoolean;
+            update: z.ZodBoolean;
+            delete: z.ZodBoolean;
+            deleteSemantics: z.ZodOptional<z.ZodEnum<{
+                hard: "hard";
+                archive: "archive";
+            }>>;
+            archiveFields: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>>;
+            updateableFields: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        }, z.core.$strict>;
+        primaryKey: z.ZodArray<z.ZodString>;
+        evidenceAdapter: z.ZodOptional<z.ZodString>;
+        evidenceLane: z.ZodOptional<z.ZodEnum<{
+            adapter: "adapter";
+            claims: "claims";
+        }>>;
+        notes: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+/** Inferred classifications-document shape. */
+export type ClassificationFile = z.infer<typeof ClassificationFileSchema>;
+//# sourceMappingURL=classification.d.ts.map

package/dist/schemas/classification.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"classification.d.ts","sourceRoot":"","sources":["../../src/schemas/classification.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB;;;;;;;;;GASG;AACH,eAAO,MAAM,eAAe;;;;;;;;;;;kBAgExB,CAAC;AAEL,gCAAgC;AAChC,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAExD;;GAEG;AACH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAiD7B,CAAC;AAEL,kDAAkD;AAClD,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE;;;;GAIG;AACH,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAM1B,CAAC;AAEZ,+CAA+C;AAC/C,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC"}

package/dist/schemas/classification.js

@@ -0,0 +1,154 @@
+/**
+ * Classification schemas (plan §4.3): business meaning attached to
+ * discovered resources that cannot be safely inferred — exposure, plane,
+ * lifecycle, identity columns, and the trusted evidence adapter.
+ *
+ * ADR 0001 encoded here:
+ * - composite identity = column-keyed `entityId` + mandatory ordered
+ *   `primaryKey` attribute;
+ * - internal resources default to NO CRUD obligations and their claims
+ *   are invalid (enforced downstream by the verdict engine, not here);
+ * - a user-facing resource cannot be proven without a trusted evidence
+ *   adapter, so `evidenceAdapter` is mandatory for user-facing entries —
+ *   on the BUSINESS-resource lane. `http.endpoint` resources are witnessed
+ *   through the claims/witness-proxy lane (`http:frontend-request-observed`
+ *   etc.), not through entity persistence adapters (whose contract — read
+ *   by id, normalize body, deletion kind — is about business entities), so
+ *   a user-facing classification may instead declare
+ *   `evidenceLane: 'claims'` and omit the adapter.
+ */
+import { z } from 'zod';
+import { ExposureSchema, PlaneSchema, SchemaVersionField } from './common.js';
+/**
+ * Lifecycle surface of a resource. `create`/`read`/`update` are plain
+ * switches; `delete` additionally declares its semantics because archive
+ * and hard delete have different evidence contracts (plan §5.3).
+ *
+ * `archiveFields` is the OWNER-DECLARED archived state (audit round 5):
+ * the expected post-archive field values come from the classification —
+ * never from the tested suite — so a suite cannot bless an unarchived
+ * entity by declaring its current state as the expected result.
+ */
+export const LifecycleSchema = z
+    .object({
+    /** New entities can be created through the UI. */
+    create: z.boolean(),
+    /** Entities can be read/viewed through the UI. */
+    read: z.boolean(),
+    /** Declared entity fields can be changed through the UI. */
+    update: z.boolean(),
+    /** Entities can be removed (hard) or archived (soft) through the UI. */
+    delete: z.boolean(),
+    /** Required when `delete` is true: how removal manifests. */
+    deleteSemantics: z.enum(['hard', 'archive']).optional(),
+    /**
+     * Required when `deleteSemantics` is 'archive': the owner-declared
+     * field values that identify the archived state (e.g. `{status:
+     * 'archived'}`). Graded by the engine against the witness's own
+     * engine-side observation.
+     */
+    archiveFields: z
+        .record(z.string(), z.union([z.string(), z.number(), z.boolean()]))
+        .optional(),
+    /**
+     * Owner-declared fields whose change constitutes a real update
+     * (audit round 6). `persistence:update` is satisfied only when the
+     * engine-observed before/after delta touches at least one of these —
+     * bookkeeping columns (e.g. `updated_at`) alone never satisfy.
+     * Optional in the schema; the engine fails closed on update
+     * obligations for resources that omit it.
+     */
+    updateableFields: z.array(z.string().min(1)).min(1).optional(),
+})
+    .strict()
+    .superRefine((lifecycle, ctx) => {
+    if (lifecycle.delete && lifecycle.deleteSemantics === undefined) {
+        ctx.addIssue({
+            code: 'custom',
+            path: ['deleteSemantics'],
+            message: "lifecycle.delete is true: 'deleteSemantics' must be 'hard' or 'archive'",
+        });
+    }
+    if (lifecycle.deleteSemantics === 'archive' && lifecycle.archiveFields === undefined) {
+        ctx.addIssue({
+            code: 'custom',
+            path: ['archiveFields'],
+            message: "lifecycle.deleteSemantics is 'archive': 'archiveFields' must declare the " +
+                'owner-owned archived state (e.g. {status: archived})',
+        });
+    }
+    // An empty archiveFields map passes no postcondition check, so it is
+    // a config error, not a dormant one (fail closed at authoring time).
+    if (lifecycle.archiveFields !== undefined &&
+        Object.keys(lifecycle.archiveFields).length === 0) {
+        ctx.addIssue({
+            code: 'custom',
+            path: ['archiveFields'],
+            message: 'archiveFields must declare at least one field (an empty map can never ' +
+                'satisfy the archive postcondition)',
+        });
+    }
+});
+/**
+ * Classification entry for a single resource id.
+ */
+export const ClassificationSchema = z
+    .object({
+    /** Whether the resource is exposed to end users. */
+    exposure: ExposureSchema,
+    /** Deployment plane the resource lives on. */
+    plane: PlaneSchema,
+    /** Lifecycle operations the UI supports for this resource. */
+    lifecycle: LifecycleSchema,
+    /**
+     * Mandatory ordered entity-identity columns (ADR 0001): a single
+     * column for simple identity, ordered lowest-index-first for
+     * composite identity.
+     */
+    primaryKey: z.array(z.string().min(1)).min(1),
+    /**
+     * Trusted evidence adapter name (resolved against
+     * `.gateforge/adapters/<name>.mjs`). Required for user-facing
+     * BUSINESS resources; internal resources are never CRUD-obligated,
+     * so the adapter is optional there.
+     */
+    evidenceAdapter: z.string().min(1).optional(),
+    /**
+     * Which evidence lane proves user-facing reachability. Omitted means
+     * the default `'adapter'` lane: a reviewed EntityAdapter must collect
+     * the evidence (the business-resource requirement — never weakened).
+     * `'claims'` is the http.endpoint lane: routes are witnessed through
+     * the claims/witness-proxy lane (`http:frontend-request-observed`),
+     * not through entity persistence adapters, so the adapter is not
+     * demanded. The classifier mints `'claims'` ONLY for `http.endpoint`
+     * resources; business resources must keep the adapter demand.
+     */
+    evidenceLane: z.enum(['adapter', 'claims']).optional(),
+    /** Free-form classification note shown in reports. */
+    notes: z.string().optional(),
+})
+    .strict()
+    .superRefine((entry, ctx) => {
+    if (entry.exposure === 'user-facing' &&
+        entry.evidenceAdapter === undefined &&
+        entry.evidenceLane !== 'claims') {
+        ctx.addIssue({
+            code: 'custom',
+            path: ['evidenceAdapter'],
+            message: "user-facing resources require an 'evidenceAdapter' (claims are not proof; trusted adapters collect evidence)",
+        });
+    }
+});
+/**
+ * The classifications document: `.gateforge` classification YAML mapping
+ * resource ids to their classification. Resources discovered but absent
+ * here are `unclassified` and fail closed downstream.
+ */
+export const ClassificationFileSchema = z
+    .object({
+    schemaVersion: SchemaVersionField,
+    /** Classification per resource id. */
+    resources: z.record(z.string().min(1), ClassificationSchema),
+})
+    .strict();
+//# sourceMappingURL=classification.js.map

package/dist/schemas/classification.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"classification.js","sourceRoot":"","sources":["../../src/schemas/classification.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAE9E;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC;KAC7B,MAAM,CAAC;IACN,kDAAkD;IAClD,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE;IACnB,kDAAkD;IAClD,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE;IACjB,4DAA4D;IAC5D,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE;IACnB,wEAAwE;IACxE,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE;IACnB,6DAA6D;IAC7D,eAAe,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE;IACvD;;;;;OAKG;IACH,aAAa,EAAE,CAAC;SACb,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;SAClE,QAAQ,EAAE;IACb;;;;;;;OAOG;IACH,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC/D,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,SAAS,EAAE,GAAG,EAAE,EAAE;IAC9B,IAAI,SAAS,CAAC,MAAM,IAAI,SAAS,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;QAChE,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,iBAAiB,CAAC;YACzB,OAAO,EACL,yEAAyE;SAC5E,CAAC,CAAC;IACL,CAAC;IACD,IAAI,SAAS,CAAC,eAAe,KAAK,SAAS,IAAI,SAAS,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QACrF,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,eAAe,CAAC;YACvB,OAAO,EACL,2EAA2E;gBAC3E,sDAAsD;SACzD,CAAC,CAAC;IACL,CAAC;IACD,qEAAqE;IACrE,qEAAqE;IACrE,IACE,SAAS,CAAC,aAAa,KAAK,SAAS;QACrC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,MAAM,KAAK,CAAC,EACjD,CAAC;QACD,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,eAAe,CAAC;YACvB,OAAO,EACL,wEAAwE;gBACxE,oCAAoC;SACvC,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAKL;;GAEG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC;KAClC,MAAM,CAAC;IACN,oDAAoD;IACpD,QAAQ,EAAE,cAAc;IACxB,8CAA8C;IAC9C,KAAK,EAAE,WAAW;IAClB,8DAA8D;IAC9D,SAAS,EAAE,eAAe;IAC1B;;;;OAIG;IACH,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7C;;;;;OAKG;IACH,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC7C;;;;;;;;;OASG;IACH,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE;IACtD,sDAAsD;IACtD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC7B,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;IAC1B,IACE,KAAK,CAAC,QAAQ,KAAK,aAAa;QAChC,KAAK,CAAC,eAAe,KAAK,SAAS;QACnC,KAAK,CAAC,YAAY,KAAK,QAAQ,EAC/B,CAAC;QACD,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,iBAAiB,CAAC;YACzB,OAAO,EACL,8GAA8G;SACjH,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAKL;;;;GAIG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC;KACtC,MAAM,CAAC;IACN,aAAa,EAAE,kBAAkB;IACjC,sCAAsC;IACtC,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,oBAAoB,CAAC;CAC7D,CAAC;KACD,MAAM,EAAE,CAAC"}

package/dist/schemas/common.d.ts

@@ -0,0 +1,73 @@
+/**
+ * Shared schema building blocks for every gateforge artifact.
+ *
+ * ADR 0001: every artifact carries `schemaVersion`. Unknown versions are
+ * rejected outright — gateforge never migrates old payloads (fail closed).
+ */
+import { z } from 'zod';
+/**
+ * The only schemaVersion gateforge accepts on any artifact, config, or
+ * wire payload. Bumping this is a breaking, opt-in event per artifact —
+ * there is no automatic migration path, by design.
+ */
+export declare const GATEFORGE_SCHEMA_VERSION = 1;
+/**
+ * schemaVersion field with the "unknown versions rejected" behavior:
+ * anything but `1` produces an explicit unsupported-version diagnostic
+ * rather than a silent type error.
+ */
+export declare const SchemaVersionField: z.ZodLiteral<1>;
+/** Where in a source file an artifact was found (discovery-spike shape). */
+export declare const LocationSchema: z.ZodObject<{
+    file: z.ZodString;
+    line: z.ZodNumber;
+    col: z.ZodNumber;
+}, z.core.$strict>;
+/** Inferred source location shape. */
+export type Location = z.infer<typeof LocationSchema>;
+/** Whether a resource is exposed to end users or purely internal. */
+export declare const ExposureSchema: z.ZodEnum<{
+    "user-facing": "user-facing";
+    internal: "internal";
+}>;
+/** Inferred exposure shape. */
+export type Exposure = z.infer<typeof ExposureSchema>;
+/**
+ * Deployment plane of a resource (tenant-scoped, master/shared, or global).
+ */
+export declare const PlaneSchema: z.ZodEnum<{
+    tenant: "tenant";
+    master: "master";
+    global: "global";
+}>;
+/** Inferred plane shape. */
+export type Plane = z.infer<typeof PlaneSchema>;
+/**
+ * Transport a plugin speaks over the plugin boundary (ADR 0002):
+ * `subprocess` = GPP/3 JSON-lines child process, `in-process` = TS
+ * detector loaded into the engine.
+ */
+export declare const TransportSchema: z.ZodEnum<{
+    subprocess: "subprocess";
+    "in-process": "in-process";
+}>;
+/** Inferred transport shape. */
+export type Transport = z.infer<typeof TransportSchema>;
+/** Trust tier of an evidence record (ADR 0001: only witnessed can satisfy). */
+export declare const TrustTierSchema: z.ZodEnum<{
+    claimed: "claimed";
+    witnessed: "witnessed";
+}>;
+/** Inferred trust-tier shape. */
+export type TrustTier = z.infer<typeof TrustTierSchema>;
+/**
+ * Contract-name grammar. Contracts carry their own namespace segment
+ * (`crud:update`, `crud:delete`), so interior colons are legal; the
+ * obligation id `<resourceId>:<contract>` splits at the FIRST colon,
+ * hence a contract must not START with one. Trailing colons are
+ * rejected as malformed.
+ */
+export declare const ContractNameSchema: z.ZodString;
+/** Inferred contract-name shape. */
+export type ContractName = z.infer<typeof ContractNameSchema>;
+//# sourceMappingURL=common.d.ts.map

package/dist/schemas/common.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"common.d.ts","sourceRoot":"","sources":["../../src/schemas/common.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;GAIG;AACH,eAAO,MAAM,wBAAwB,IAAI,CAAC;AAE1C;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,iBAK7B,CAAC;AAEH,4EAA4E;AAC5E,eAAO,MAAM,cAAc;;;;kBAShB,CAAC;AAEZ,sCAAsC;AACtC,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAEtD,qEAAqE;AACrE,eAAO,MAAM,cAAc;;;EAAsC,CAAC;AAElE,+BAA+B;AAC/B,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAEtD;;GAEG;AACH,eAAO,MAAM,WAAW;;;;EAAyC,CAAC;AAElE,4BAA4B;AAC5B,MAAM,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAEhD;;;;GAIG;AACH,eAAO,MAAM,eAAe;;;EAAuC,CAAC;AAEpE,gCAAgC;AAChC,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAExD,+EAA+E;AAC/E,eAAO,MAAM,eAAe;;;EAAmC,CAAC;AAEhE,iCAAiC;AACjC,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAExD;;;;;;GAMG;AACH,eAAO,MAAM,kBAAkB,aAM5B,CAAC;AAEJ,oCAAoC;AACpC,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC"}

package/dist/schemas/common.js

@@ -0,0 +1,60 @@
+/**
+ * Shared schema building blocks for every gateforge artifact.
+ *
+ * ADR 0001: every artifact carries `schemaVersion`. Unknown versions are
+ * rejected outright — gateforge never migrates old payloads (fail closed).
+ */
+import { z } from 'zod';
+/**
+ * The only schemaVersion gateforge accepts on any artifact, config, or
+ * wire payload. Bumping this is a breaking, opt-in event per artifact —
+ * there is no automatic migration path, by design.
+ */
+export const GATEFORGE_SCHEMA_VERSION = 1;
+/**
+ * schemaVersion field with the "unknown versions rejected" behavior:
+ * anything but `1` produces an explicit unsupported-version diagnostic
+ * rather than a silent type error.
+ */
+export const SchemaVersionField = z.literal(GATEFORGE_SCHEMA_VERSION, {
+    error: (issue) => issue.input === undefined
+        ? `schemaVersion is required and must be ${GATEFORGE_SCHEMA_VERSION}`
+        : `unsupported schemaVersion: got ${String(issue.input)}, expected ${GATEFORGE_SCHEMA_VERSION} (gateforge never migrates old versions)`,
+});
+/** Where in a source file an artifact was found (discovery-spike shape). */
+export const LocationSchema = z
+    .object({
+    /** Repo-root-relative path of the source file. */
+    file: z.string().min(1),
+    /** 1-based line number. */
+    line: z.number().int().min(1),
+    /** 0-based column offset. */
+    col: z.number().int().min(0),
+})
+    .strict();
+/** Whether a resource is exposed to end users or purely internal. */
+export const ExposureSchema = z.enum(['user-facing', 'internal']);
+/**
+ * Deployment plane of a resource (tenant-scoped, master/shared, or global).
+ */
+export const PlaneSchema = z.enum(['tenant', 'master', 'global']);
+/**
+ * Transport a plugin speaks over the plugin boundary (ADR 0002):
+ * `subprocess` = GPP/3 JSON-lines child process, `in-process` = TS
+ * detector loaded into the engine.
+ */
+export const TransportSchema = z.enum(['subprocess', 'in-process']);
+/** Trust tier of an evidence record (ADR 0001: only witnessed can satisfy). */
+export const TrustTierSchema = z.enum(['claimed', 'witnessed']);
+/**
+ * Contract-name grammar. Contracts carry their own namespace segment
+ * (`crud:update`, `crud:delete`), so interior colons are legal; the
+ * obligation id `<resourceId>:<contract>` splits at the FIRST colon,
+ * hence a contract must not START with one. Trailing colons are
+ * rejected as malformed.
+ */
+export const ContractNameSchema = z
+    .string()
+    .min(1)
+    .regex(/^[^:].*[^:]|^[^:]$/, "contract must not start or end with ':' (obligation ids split at the first colon)");
+//# sourceMappingURL=common.js.map

package/dist/schemas/common.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"common.js","sourceRoot":"","sources":["../../src/schemas/common.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;GAIG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC;AAE1C;;;;GAIG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,OAAO,CAAC,wBAAwB,EAAE;IACpE,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CACf,KAAK,CAAC,KAAK,KAAK,SAAS;QACvB,CAAC,CAAC,yCAAyC,wBAAwB,EAAE;QACrE,CAAC,CAAC,kCAAkC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,wBAAwB,0CAA0C;CAC5I,CAAC,CAAC;AAEH,4EAA4E;AAC5E,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC;KAC5B,MAAM,CAAC;IACN,kDAAkD;IAClD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,2BAA2B;IAC3B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,6BAA6B;IAC7B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC7B,CAAC;KACD,MAAM,EAAE,CAAC;AAKZ,qEAAqE;AACrE,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC,CAAC;AAKlE;;GAEG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;AAKlE;;;;GAIG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC,CAAC;AAKpE,+EAA+E;AAC/E,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC;AAKhE;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC;KAChC,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,KAAK,CACJ,oBAAoB,EACpB,mFAAmF,CACpF,CAAC"}

package/dist/schemas/coverage-policy.d.ts

@@ -0,0 +1,89 @@
+/**
+ * Coverage-policy schemas (plan 2026-09-13 §3.6, Phase 0 item 7, ADR
+ * 0005 D5): a tracked, OWNER-OWNED configuration section enumerating
+ * user-facing tables, their required real-UI CRUD operations, and any
+ * owner disposition excusing a table from that coverage. Recording or
+ * approving a disposition is a trusted-policy act — an agent edit never
+ * self-approves, because the section participates in the trusted policy
+ * revision identity.
+ */
+import { z } from 'zod';
+/** The four real-UI operations a table may require coverage for. */
+export declare const COVERAGE_OPERATIONS: readonly ["create", "read", "update", "delete"];
+/** The operation union a coverage policy may require. */
+export declare const CoverageOperationSchema: z.ZodEnum<{
+    create: "create";
+    read: "read";
+    update: "update";
+    delete: "delete";
+}>;
+/** Inferred coverage-operation type. */
+export type CoverageOperation = (typeof COVERAGE_OPERATIONS)[number];
+/**
+ * An OWNER disposition (plan §3.6): the recorded reason a table owes no
+ * real-UI coverage for its required operations. Kinds are closed-world;
+ * `other` requires the note to stay auditable. Approving one is a
+ * trusted-policy act, never an agent self-approval.
+ */
+export declare const CoverageDispositionSchema: z.ZodObject<{
+    kind: z.ZodEnum<{
+        "read-only-surface": "read-only-surface";
+        "admin-plane-unreachable": "admin-plane-unreachable";
+        "not-user-facing": "not-user-facing";
+        other: "other";
+    }>;
+    note: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+/** Inferred coverage-disposition type. */
+export type CoverageDisposition = z.infer<typeof CoverageDispositionSchema>;
+/** One policy-enumerated user-facing table. */
+export declare const CoverageTableSchema: z.ZodObject<{
+    name: z.ZodString;
+    requiredOperations: z.ZodArray<z.ZodEnum<{
+        create: "create";
+        read: "read";
+        update: "update";
+        delete: "delete";
+    }>>;
+    disposition: z.ZodOptional<z.ZodObject<{
+        kind: z.ZodEnum<{
+            "read-only-surface": "read-only-surface";
+            "admin-plane-unreachable": "admin-plane-unreachable";
+            "not-user-facing": "not-user-facing";
+            other: "other";
+        }>;
+        note: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+/** Inferred coverage-table type. */
+export type CoverageTable = z.infer<typeof CoverageTableSchema>;
+/**
+ * The `coveragePolicy` config section (plan §3.6). Absent or empty
+ * (`tables: []`) means the feature is OFF — enabling it is an explicit,
+ * tracked owner decision. Table names must be unique (a duplicate would
+ * make the enforcement scope ambiguous); each name is validated against
+ * the current run's resource inventory on every run.
+ */
+export declare const CoveragePolicySchema: z.ZodObject<{
+    tables: z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        requiredOperations: z.ZodArray<z.ZodEnum<{
+            create: "create";
+            read: "read";
+            update: "update";
+            delete: "delete";
+        }>>;
+        disposition: z.ZodOptional<z.ZodObject<{
+            kind: z.ZodEnum<{
+                "read-only-surface": "read-only-surface";
+                "admin-plane-unreachable": "admin-plane-unreachable";
+                "not-user-facing": "not-user-facing";
+                other: "other";
+            }>;
+            note: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+/** Inferred coverage-policy section type. */
+export type CoveragePolicy = z.infer<typeof CoveragePolicySchema>;
+//# sourceMappingURL=coverage-policy.d.ts.map

package/dist/schemas/coverage-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"coverage-policy.d.ts","sourceRoot":"","sources":["../../src/schemas/coverage-policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,oEAAoE;AACpE,eAAO,MAAM,mBAAmB,iDAAkD,CAAC;AAEnF,yDAAyD;AACzD,eAAO,MAAM,uBAAuB;;;;;EAA8B,CAAC;AAEnE,wCAAwC;AACxC,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AAErE;;;;;GAKG;AACH,eAAO,MAAM,yBAAyB;;;;;;;;kBAelC,CAAC;AAEL,0CAA0C;AAC1C,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E,+CAA+C;AAC/C,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;kBAarB,CAAC;AAEZ,oCAAoC;AACpC,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE;;;;;;GAMG;AACH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;kBAoB7B,CAAC;AAEL,6CAA6C;AAC7C,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC"}